{"report_id":"5e1622b8-f86a-4e75-9726-1d803ac1896a","version":0,"status":"done","tags":[],"date":"2026-08-06T02:44:53Z","url":{"schema":"https","addr":"phantomextension.app/wall/","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"phantomextension.app/wall/","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"title":"Wallet","dom":{"size":48658,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16870)","md5":"56b4c548ab9aead4b1b34530b04ad908","sha1":"3a349edf4400cdc08284c09bee38658571cbef8d","sha256":"ff6430ee3c9e35f36b8781e1178639dfa1f3da4a462c1aa731a601cdf1167775","sha512":"252263dda59bcc240190feb196ba69f88b7475d440daf3a35840f78e4ef1f17de86cb388c39663e21767dad8d01cf8c9d8eedc39cc6eedc671903735cc05306b","ssdeep":"768:gzkJQmWYRZdypERVSCARvWC89el9uqHcxG5oNOO+AVuo0sCs:gzCRRypGA8C8nqHcxG5FO+AV7","tlshash":"6b23d632b59900727b6fc79fc05b731ca598fa65d601aab6b4f5202845e4ef231b370e","dom_hash":"domhash08446af4486c705f98c99e51c77e7bd4","first_seen":"2026-08-06T02:44:58.489783Z","last_seen":"2026-08-06T02:44:58.489783Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"phantomextension.app/wall/","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-10T02:44:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"phantomextension.app","ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":27,"request_count":27,"received_data":1105122,"sent_data":13980,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:28.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Elementor:4.2.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":2,"received_data":87898,"sent_data":1148,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":2,"received_data":119527,"sent_data":1287,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5050,"data":"","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-08-11T14:58:51.436977Z","times_seen":19787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-11T15:02:49.324826Z","times_seen":30725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.7","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3292c1b42af288c371c5411c4253f18","sha1":"a563f69f9ef58e0304bbfcc783b12ab21fd4d401","sha256":"b00cbc0ab0a8a635ebeaf832cc1e0775145b3775e617ede3c1e45f19681ffcba","sha512":"72c49665eff145a54ebf4545f6d77342eefb2222e00f4161313a4aa9270717e81c525f666a0d5fcc00e292bd635f56cfe58b1e82dc106a67a70ddff029436f1b","ssdeep":"384:biIdndptaQ9HuGJswyVO+pYDTWmMo7YtDT6HJiwkkohmvFsN7KOljuOzQYqEbzGP:biIdndptaQ9HuGJswyV/pkTAQYtDT6Hb","tlshash":"02a2b9063153987a64cfc157e0a7420e7b334895740570ed7abc6cdba9b8d9a33ea335","size":21417,"data":"","first_seen":"2023-03-07T22:28:40Z","last_seen":"2026-08-11T08:29:22.31431Z","times_seen":1171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T14:55:38.276544Z","times_seen":929302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wall/","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4c597e5869b2ad5536888ffb8bd93c3","sha1":"059594b1ebe58afb453956a630d37ebb6564779c","sha256":"a03f489b35fe14824d8e0a005f1487156a2293aaabd502226f0a855589229cc9","sha512":"5b611886cb6f4ff03f5a98221be6699218d973503fd5e498ad742d361918d392befb91d8d6ec45fe15d2cace659a919f2e23fd6a9730f02e8804b8bfa4d5a1d5","ssdeep":"","tlshash":"e911e9f3b39da07fbaae6d66193802ce6a1c90735c100a5bfeac35758c8042538b2d40","size":962,"data":"","first_seen":"2026-06-30T16:37:28.019196Z","last_seen":"2026-08-11T15:31:22.800573Z","times_seen":3550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wall/","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"06fa13e650fc93f06fd0f3f4dab46cb2","sha1":"c4df837925c18f645cfc87dcef06430a073c10f0","sha256":"8e2cda235fc9741aafb0fc3d468704152dd9774ab0768dd2325bc3eda6296f41","sha512":"a9a75daa0a061d6ace57b9611d2e4c8400031883cd9ecd6c019aba8292b8020ad275515c527df64d901f3f2e25a1460fd37cc286703106437f3ea320e9b5a6b0","ssdeep":"","tlshash":"9b51932079455a7b83d7cb853e2bbf03597c0526a04078a9f8fc486c00b59753207e47","size":2648,"data":"","first_seen":"2026-08-06T02:44:58.52717Z","last_seen":"2026-08-06T02:44:58.52717Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wall/","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-08-11T14:59:21.29047Z","times_seen":41692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wall/","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb4e5f557aeb8c4d11cb1f3ca2e1d6bc","sha1":"4f103701ad81925ad4199177a134bb0174772e1a","sha256":"30fde8803025848f3638e65fd9f6f6ee266169ae3904f639015b843cda71597d","sha512":"1602f0a16f8cf3c35622277253f0f2883dbe9e0b0a3807e4084bb3cacf3f443021173e6874660613aa2845b17ac5db5efa69959785cc68bff47f63cbc7db0255","ssdeep":"","tlshash":"03219a5a2f220e3457eee6c9a5ca3aaf88d0023265c0740d16dae46001f3dddf1492a7","size":1226,"data":"","first_seen":"2026-08-06T02:44:58.529982Z","last_seen":"2026-08-06T02:44:58.529982Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.7","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d34a31c190be8bdf335fa0c44ef52699","sha1":"483e1b4ba88b6e7ca8153871811e32cab021d6e4","sha256":"f032f0b942ea9f4bd771ddb2262c518e948328a305a5268dacc74f3eee364514","sha512":"867865608f99f5c9fecf0a583e3434df06bae7beb5c5a6f2c24655f6030ec93e1c238ab934ec269601741ed122a483931ff719c84a1e8eded8c943c75fcf7a58","ssdeep":"96:B+NxGhQa+dLKhOvVU69GfWg+tDre1MlwiGVSLUVccxjefbfBbb0BL8k2:wN6QvLKhOvVUhWgSDrVGcQHxa4ok2","tlshash":"ceb133950654ed2b36e139d5b05b6b701a3ed0337c16aa81fa11edec19ecfc043ea532","size":5184,"data":"","first_seen":"2023-03-07T22:28:40Z","last_seen":"2026-08-11T08:29:22.33621Z","times_seen":1166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5732,"data":"","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-08-11T14:58:51.457052Z","times_seen":19326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.2.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb598bfcc854fe75a6e30b419f3b08a4","sha1":"0abc710caab4a8e0f73f65b6cd7276cbba371876","sha256":"b374e10bcffae8cceceba134d3e33a9fc0d92a18d4cb5285ffa8242bebb96aae","sha512":"4932da0a23f0e45fcd0e8af032945518858d05c7ddb0fc5981caef2078695f8ae8a714f8be021294c7bbbe48dbe24b0a995b7978196b770afaa3aa8e22913209","ssdeep":"96:+nsL0Z9Z4JfrjqyWiNDyUXOWZp5SNm4leN8EVrzLyVx2UlKBKGarNcl8/2:WsLGyrjiiNWW5SNmHFJW6x7G/2","tlshash":"fcc151941a94fd2b31e139d8e01ba775652ec0333c1af981fa32eced54e4ed187aa531","size":5819,"data":"","first_seen":"2026-07-20T21:40:32.205816Z","last_seen":"2026-08-11T14:51:34.551986Z","times_seen":3476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-11T14:58:51.463984Z","times_seen":341016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wall/elementor-pro-frontend-js-before","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9997d01573bf59cc29ad3e121b94d1b4","sha1":"b3f5920b5529715ccdf979c54917866769d2ea40","sha256":"62e12e0211913fcef0fa17fda370cc10baec324ddb1d07776dbc5367a7418dea","sha512":"3239b4a4faf6934daef63b6f4ef592a22bbfba6d9b1e9247db8ae0dc16d8552ec0e7add3aa3ceadb53509dd14c882ca181345d41fe6fb4fa228229de99c1a723","ssdeep":"","tlshash":"70319d5aef220e3457eee6f9a5ca3aaf88d00232e5c0740d15d9d46001f3dddf1492a7","size":1474,"data":"","first_seen":"2026-08-06T02:44:58.531796Z","last_seen":"2026-08-06T02:44:58.531796Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/wp-emoji-loader.min.js","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de1b80e85e3aa1bf24f5b929a46c4949","sha1":"3beca4e3c26f53e3a6a29af0675ed4c9b771ba71","sha256":"dc3e04831121fe9ac07894637f08996921ad47e529f04e353ce6711a00a5bfd7","sha512":"83479d944ecbaa7d158680820699de6d21211ec6aab3ff7854e40efdc0cf13ba86e0b1751ae6cd42db3080bf901430ca8d1848b2e66301387b08d7c1ad004420","ssdeep":"","tlshash":"4861869ae77a38dbb2f900f2697e0d47eb614435d6c8d438c9bda3141cb5893c274a46","size":3228,"data":"","first_seen":"2026-08-06T02:44:58.533459Z","last_seen":"2026-08-06T02:44:58.533459Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T14:55:38.266321Z","times_seen":1014429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.2.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50602,"data":"","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-08-11T14:51:34.613232Z","times_seen":57616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.2.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c6aa09d0faf7577c8ae64d43b8241ad","sha1":"9d31e838cc042539556ca9223a635349f6e4af35","sha256":"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813","sha512":"d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3","ssdeep":"768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni","tlshash":"0de208523296e866069f48a3f0231119f3775dd9b80af0d5b2bcdce5a471e877362b34","size":32098,"data":"","first_seen":"2026-05-18T18:48:00.243251Z","last_seen":"2026-08-11T14:51:34.601723Z","times_seen":22697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wall/wp-i18n-js-after","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ae1ec5625b5b5ec75e456f83402d878","sha1":"44b6325050b8a183218783e964814606831ea280","sha256":"e4c5b4cf8eff86436f0a215c9f3dd23b45f5dc1579b26c175de23787d269b439","sha512":"e6a6fc3928f5f3d0abf23837bcadb00d27d92cfdbc6f72a5591dd6264ed4dd6697c2d92ee115a65bc2f0a880f136751807e43dedeb37f98a900630338ea912e9","ssdeep":"","tlshash":"36e012cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":341,"data":"","first_seen":"2025-12-21T13:06:32.042368Z","last_seen":"2026-08-06T02:44:58.535144Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.7","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd9dfabfa2ce491dde7596d9f2ea3b4f","sha1":"7560230d2a1c73f13f0250e839fbc3d8eead3fde","sha256":"05b11dfc2b0c1507d3f8d191e99d493dd33fc44fb2de82132aa1c7e0a0d0c1cc","sha512":"38b7f41853f0679839557917f92e592830bcc988503ef376668db7ee79d4ae00f15b67967fe0edcd6e354f880f7261c719377576e6bbf918adef8c2a757fc8f3","ssdeep":"1536:B8WOaWbzhwMhU1naVPhEhcHqke/YPEMCEsZBywqIQm6YIzH+ajwb4UX8ulaij86j:IobxTpVNlx7rLmVR32","tlshash":"10d3d7523052a8b646cf50abb417020db7221dadb403b4aeb9fd8cdb9674dc63376376","size":134630,"data":"","first_seen":"2023-03-07T22:28:40Z","last_seen":"2026-08-09T15:57:33.512076Z","times_seen":589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","size":449,"data":"","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-08-11T14:24:04.048861Z","times_seen":94126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-08-11T14:51:34.549305Z","times_seen":150710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wall/elementor-frontend-js-before","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f4a684f21b26fc38e8d90678d6a9d1c","sha1":"09db2776a5a989ed7c0b08853179760f32849958","sha256":"4eed215f909ad5c9ff71b0f6262d95720dfe830cbd1f4c03472e154d4178e78e","sha512":"9b9e3b09b7321a8f0572403a4cdb0dd694eddf8249ee88d924804f5b44bdda06ee644e7606d275fe3414af058a33d996bffa5d7f18cfdf769c92b336bf11c203","ssdeep":"","tlshash":"64518220f9455a7b83d7cbb53e2bba03597c0526e04078a9f8bc486c00b59653207e47","size":2884,"data":"","first_seen":"2026-08-06T02:44:58.536118Z","last_seen":"2026-08-06T02:44:58.536118Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://phantomextension.app/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.2.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.385Z","timestamp":1785984264385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.2.1 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 08:39:55 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 10145\r\ncontent-type: text/css\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":54666,"size_decoded":10406,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-08-11T14:51:34.587887Z","times_seen":71383,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.589Z","timestamp":1785984264589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 07 Feb 2025 04:27:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 8375\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":8649,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-11T14:58:51.463984Z","times_seen":341016,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:25.017Z","timestamp":1785984265017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://phantomextension.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 30 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 577607\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-11T14:56:28.782532Z","times_seen":259678,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":4,"connect":29,"send":0,"wait":18,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:25.091Z","timestamp":1785984265091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 08:39:55 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 269\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:25 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":449,"size_decoded":542,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (449), with no line terminators","md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-08-11T14:24:04.048861Z","times_seen":94126,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:25.092Z","timestamp":1785984265092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 08:39:55 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3130\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:25 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8481,"size_decoded":3404,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-08-11T14:51:34.549305Z","times_seen":150710,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=4.2.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.391Z","timestamp":1785984264391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=4.2.1 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 08:39:55 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 334\r\ncontent-type: text/css\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1793,"size_decoded":593,"mime_type":"text/css","magic":"ASCII text, with very long lines (1793), with no line terminators","md5":"c329a1f8486b82d9b9c7cb4d7060f346","sha1":"85b874b1c09c4f163738d439cacd53e6141f4f2b","sha256":"808a659eb4e85607c6efe022bff149c3076853c5570a322bd35e5e8cb9458904","sha512":"414974a35c9d401df85422ca92e886a3e0b57c6cd071023dd97d2987157fc9976d777d7b44c0c8d4a8caac81b0c1b862828bdaa67e5b05345894964a1dbe81a4","ssdeep":"","tlshash":"3731f650bd07662c787fa60f8413129c658494dee581ccc6dba1f60aa2fcde33336935","first_seen":"2025-04-08T12:29:44.439106Z","last_seen":"2026-08-11T14:59:21.113031Z","times_seen":40959,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=auto","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.576Z","timestamp":1785984264576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=auto HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 06 Aug 2026 02:44:24 GMT\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97200,"size_decoded":3446,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e22303da4cdd37b7e3a2005cbfeb9ca9","sha1":"ddb86b79b1473f0168e68541e44858e86289bc09","sha256":"5c7de38d83a3c310b9bfadf02e93521d7f5d56c615b6521cb91f98aff2c42bbb","sha512":"a5e5fe7960622eda267e5b8b6ccb3a1045d0f89a360f07f77334ef7aa0a7383c8a2befc7d044adca52b584109459875ae76821e8741f763b4a0ad2bb488f0477","ssdeep":"768:yFdF9FAFNFgBFUKF7FnF7e+1OgSUfEwwJpK5g9UEf7h4YXogEU9SWWjD8TgfUS9T:wHq9YL2xEHSRIH2Vc7j","tlshash":"a8931da1041b5440ab835ce223ce7e35fe0f92507141d075ebfc9b6baedbda6526836c","first_seen":"2026-02-19T23:41:11.030172Z","last_seen":"2026-08-11T15:20:11.838591Z","times_seen":5365,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":38,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.7","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.594Z","timestamp":1785984264594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.7.7 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 29 Mar 2026 07:27:48 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 7577\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21417,"size_decoded":7851,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21374)","md5":"d3292c1b42af288c371c5411c4253f18","sha1":"a563f69f9ef58e0304bbfcc783b12ab21fd4d401","sha256":"b00cbc0ab0a8a635ebeaf832cc1e0775145b3775e617ede3c1e45f19681ffcba","sha512":"72c49665eff145a54ebf4545f6d77342eefb2222e00f4161313a4aa9270717e81c525f666a0d5fcc00e292bd635f56cfe58b1e82dc106a67a70ddff029436f1b","ssdeep":"384:biIdndptaQ9HuGJswyVO+pYDTWmMo7YtDT6HJiwkkohmvFsN7KOljuOzQYqEbzGP:biIdndptaQ9HuGJswyV/pkTAQYtDT6Hb","tlshash":"02a2b9063153987a64cfc157e0a7420e7b334895740570ed7abc6cdba9b8d9a33ea335","first_seen":"2023-03-07T22:28:40Z","last_seen":"2026-08-11T08:29:22.31431Z","times_seen":1171,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.53.0","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.383Z","timestamp":1785984264383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.53.0 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 08:39:55 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4631\r\ncontent-type: text/css\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22258,"size_decoded":4891,"mime_type":"text/css","magic":"ASCII text, with very long lines (22212)","md5":"de6461e7ad15a93c131b79a3d3ebbc73","sha1":"f58c7bed366371fba673f5b0edc0a1063da795f1","sha256":"c6b4e990dd45cb5fa574c9bca8163ceefa9cc933ec70f086d29817235b3ab64f","sha512":"ee4043333e30b5045e652e96d380c3b673bb9df11973e7ceadd68036b4c1a67c9230b042ee1662166554fc5612c3ffa76007d0bfc6f689a3a287af5150eef857","ssdeep":"192:r1877iN3iCOy2bvGIdpJkhugk8/H6qiMs7HqnFTSZq7RXDlCdkgIYSM8:S7iNyqEpSk8/aq8uFucbrgIYJ8","tlshash":"c1a2d9e4e46923c87732c413e745b64c60dafa20cac99d59fa6f850c1df16a70686fb8","first_seen":"2026-07-20T22:28:30.991969Z","last_seen":"2026-08-11T14:14:17.077583Z","times_seen":1877,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:25.018Z","timestamp":1785984265018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://phantomextension.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 30 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 577607\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-11T14:56:28.782532Z","times_seen":259678,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:25.162Z","timestamp":1785984265162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.2 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 02:51:07 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 5658\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:25 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22752,"size_decoded":5932,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-11T15:02:49.324826Z","times_seen":30725,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.2.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.393Z","timestamp":1785984264393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.2.1 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 08:39:55 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 160\r\ncontent-type: text/css\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":560,"size_decoded":419,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-08-11T14:59:21.219237Z","times_seen":122484,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=auto","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.579Z","timestamp":1785984264579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=auto HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 06 Aug 2026 02:44:24 GMT\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20979,"size_decoded":1572,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8ca9c41e2725423ce1fc1a61d8ff8acd","sha1":"0f4a703a8a964e236b4b2c83bafc801f0fa1ec40","sha256":"536e590532c364fcfaa825ca47adb09298e71ee67fb5fea813d0a20607d11c27","sha512":"02a5a006fa013608b957af3523affe4d27fa5efb73af7823b28b34aec8f290af3254e8a91805e6b9b81573e368a5a4a486d0ab7b2304bb5a30fa2bb23db6a8e6","ssdeep":"384:bBWLBKBXBUwBzB+B9WEHYUhsj6WX0rU+fwjWWpCU/e9wW5GlUMB6JWgDcUVonmWL:bB0BKBXB3BzB+B9dHY4sj6a0rLfwjDpz","tlshash":"78929c92483ba80567830cc163db7f71ad9e6151a082d4badbfd2db8acd6d33126075e","first_seen":"2025-09-12T19:45:09.879196Z","last_seen":"2026-08-11T15:20:11.797074Z","times_seen":5997,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":34,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.7","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.591Z","timestamp":1785984264591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.7.7 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 29 Mar 2026 07:27:48 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2451\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5184,"size_decoded":2725,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5141)","md5":"d34a31c190be8bdf335fa0c44ef52699","sha1":"483e1b4ba88b6e7ca8153871811e32cab021d6e4","sha256":"f032f0b942ea9f4bd771ddb2262c518e948328a305a5268dacc74f3eee364514","sha512":"867865608f99f5c9fecf0a583e3434df06bae7beb5c5a6f2c24655f6030ec93e1c238ab934ec269601741ed122a483931ff719c84a1e8eded8c943c75fcf7a58","ssdeep":"96:B+NxGhQa+dLKhOvVU69GfWg+tDre1MlwiGVSLUVccxjefbfBbb0BL8k2:wN6QvLKhOvVUhWgSDrVGcQHxa4ok2","tlshash":"ceb133950654ed2b36e139d5b05b6b701a3ed0337c16aa81fa11edec19ecfc043ea532","first_seen":"2023-03-07T22:28:40Z","last_seen":"2026-08-11T08:29:22.33621Z","times_seen":1166,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.7.7","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.389Z","timestamp":1785984264389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.7.7 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 29 Mar 2026 07:27:48 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":481137,"size_decoded":73612,"mime_type":"text/css","magic":"ASCII text, with very long lines (65493)","md5":"c40987277a40fe245862d29877746415","sha1":"3a447a8465853842351b08b3a63adf2b201c7deb","sha256":"802372f788e1d164af80a0f26260fcf9d6e88218ab450c014d5eaf44fda7d0e3","sha512":"e650b61af939e42f88d256aaf8a08d75c01ffc7da809d6f848104c8c8a519d97b614fc751d719bbbf2987fac6d7c797b38fef2f4384e5262411d72bcf0d0099f","ssdeep":"3072:xXptFzSq0xM0mz0h/cNzyS2MJGhsAsochVen+jtUdhvNlC6lREWlmR8VDOViG593:xXptFsrSDf7qQh/","tlshash":"d6a461a7bc13152462bf641b9287a6cc3a50c5d4a54316edfca22a0b4bfbce5733171e","first_seen":"2023-04-05T05:36:55Z","last_seen":"2026-08-09T15:57:33.49967Z","times_seen":596,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.583Z","timestamp":1785984264583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 09 Jun 2023 16:49:24 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 5422\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":5696,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T14:55:38.276544Z","times_seen":929302,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/uploads/2026/03/Screenshot-2026-03-09-at-5.04.32-PM.png","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.585Z","timestamp":1785984264585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/Screenshot-2026-03-09-at-5.04.32-PM.png HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 29 Mar 2026 07:31:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1033\r\ncontent-type: image/png\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1033,"size_decoded":1236,"mime_type":"image/png","magic":"PNG image data, 304 x 216, 4-bit colormap, non-interlaced","md5":"fbb52f87816a4993b60b28f298d9cd75","sha1":"eccfbec71d7811fced0ee94af53f34649574a86b","sha256":"5b842909785bec731b24e7900462034ab9796d2ba380c9970673e9bd909f0d74","sha512":"00a4dec0b271793f5dbbbb2470cea487db322648a96d66c08de9a4cd5a653f916e120b6f0ea505eb192d6fc7ee30a72ee764f78c947079bdcd9e85a092279de8","ssdeep":"","tlshash":"4911a88f2f810617e9faa00e17e0776d924503d819677002db9d977c9599374709553d","first_seen":"2026-03-22T20:01:43.486164Z","last_seen":"2026-08-06T02:44:58.508114Z","times_seen":14,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.2.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.588Z","timestamp":1785984264588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.2.1 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 08:39:55 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":50602,"size_decoded":21299,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50601), with no line terminators","md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-08-11T14:51:34.613232Z","times_seen":57616,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:25.015Z","timestamp":1785984265015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 29 Oct 2024 11:02:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53600\r\nvary: Accept-Encoding,User-Agent\r\ncontent-type: font/woff2\r\ndate: Thu, 06 Aug 2026 02:44:25 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":53600,"size_decoded":53839,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53600, version 1.0","md5":"a8ebc7eb54efacfda66d0a2531058ecd","sha1":"5b56dbe3d3eabe178719988f4fee76d9d4ad7079","sha256":"ce340d48531930f3f2c8b7c47d149f82c9f4413548dd216e0f4d9af94a87c374","sha512":"bde7ef9fa476ae2bf7220afadc1285dec21f1a51718f3633a82cd4d08ac0adafd02acf01db82b3c263ab8a87e2cb18a03830f302d664f4441629ec24678bf2ac","ssdeep":"1536:GcCtX6JRTj6XLzm1OSRKt9Vo3IGC9pT/UTQ+z/y:qX6DWXPmwSRIVPGC9pTREy","tlshash":"203302d1f44038206c75e3fbddecfb9434ea81aaf53945d384a658bc0f8056addb0264","first_seen":"2023-11-30T06:19:19Z","last_seen":"2026-08-11T13:37:10.76542Z","times_seen":12521,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/uploads/2026/03/phantuu-1024x222.png","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.618Z","timestamp":1785984264618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/phantuu-1024x222.png HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 29 Mar 2026 07:31:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11950\r\ncontent-type: image/png\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11950,"size_decoded":12154,"mime_type":"image/png","magic":"PNG image data, 1024 x 222, 8-bit colormap, non-interlaced","md5":"d8b3cc4ca1524b8b8970cd1b550b22fb","sha1":"2a5bb2cdc4987e5bd2e8c3bedea9c9861b1c6d49","sha256":"84530fc827080bcbf7e453f15ddf185b9c1aad97c12851a190fcf3eb18e9f41f","sha512":"9eadefb345d2fd46457ed670e07a3258b3ae613a7162cc798a7b5917437b7a6cfa665e8ce93d615282950871ab38e81305c903a7ccefcaa3a0673b5cf88ffdd2","ssdeep":"192:lsprbULVPAK/eu2TWr0qh0Yu4IyJB7bd1YyIdMhkhrSp49zBhD:61bULlDRcWr0qeYu6BH0yPCh7HhD","tlshash":"2a32b0c6e143d17ec54c9b310e6885050d6f73687b2a0b165a9b4bbba74681bcd25c98","first_seen":"2026-03-22T20:01:43.473596Z","last_seen":"2026-08-06T02:44:58.512443Z","times_seen":4,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/uploads/elementor/css/post-9.css?ver=1785660130","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.394Z","timestamp":1785984264394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-9.css?ver=1785660130 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 08:42:10 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1141\r\ncontent-type: text/css\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5255,"size_decoded":1401,"mime_type":"text/css","magic":"ASCII text, with very long lines (5255), with no line terminators","md5":"47328b033c304ba885cf66fc3e50f665","sha1":"61ca94ce6818b8f7ea355991eff2a78bc13af1e2","sha256":"133eabda0ecaef4838a985c34f5fb8e3268390691d5fab882f516b15c30b8d1b","sha512":"3b915499b508f3beb46b4722f62bbdf08b33f883260c34ced8b2802093fc617dfd6ebc557c501c153b507f1cee94602d81d71e6ae29142ffa442016768798522","ssdeep":"96:VBLAnYLRvurQhLAnZqhRv5suRuzLAnmAO8udORvKQ+UfCo4tqCX0rHkktLAnITRB:f0YEUh0shcuRuz0mAO8udOUQ+y4tqCkB","tlshash":"15b136987e034228702f651fa023e6dc24284ccdda6db7e6f4292563b8b7d55b3e2d12","first_seen":"2026-04-23T15:40:52.281829Z","last_seen":"2026-08-06T02:44:58.514945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.582Z","timestamp":1785984264582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 29 Aug 2023 04:14:24 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":38601,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T14:55:38.266321Z","times_seen":1014429,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.2.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.590Z","timestamp":1785984264590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.2.1 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 08:39:55 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 13366\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":32098,"size_decoded":13641,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32098), with no line terminators","md5":"1c6aa09d0faf7577c8ae64d43b8241ad","sha1":"9d31e838cc042539556ca9223a635349f6e4af35","sha256":"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813","sha512":"d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3","ssdeep":"768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni","tlshash":"0de208523296e866069f48a3f0231119f3775dd9b80af0d5b2bcdce5a471e877362b34","first_seen":"2026-05-18T18:48:00.243251Z","last_seen":"2026-08-11T14:51:34.601723Z","times_seen":22697,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.592Z","timestamp":1785984264592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 02:51:07 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1898\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5050,"size_decoded":2172,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-08-11T14:58:51.436977Z","times_seen":19787,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.593Z","timestamp":1785984264593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 02:51:07 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2570\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5732,"size_decoded":2844,"mime_type":"application/javascript","magic":"data","md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-08-11T14:58:51.457052Z","times_seen":19326,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.2.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.390Z","timestamp":1785984264390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.2.1 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 08:39:55 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 135\r\ncontent-type: text/css\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":214,"size_decoded":394,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-08-11T14:59:21.218444Z","times_seen":118830,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.2.1","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.587Z","timestamp":1785984264587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.2.1 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 08:39:55 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2685\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5819,"size_decoded":2959,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5819), with no line terminators","md5":"cb598bfcc854fe75a6e30b419f3b08a4","sha1":"0abc710caab4a8e0f73f65b6cd7276cbba371876","sha256":"b374e10bcffae8cceceba134d3e33a9fc0d92a18d4cb5285ffa8242bebb96aae","sha512":"4932da0a23f0e45fcd0e8af032945518858d05c7ddb0fc5981caef2078695f8ae8a714f8be021294c7bbbe48dbe24b0a995b7978196b770afaa3aa8e22913209","ssdeep":"96:+nsL0Z9Z4JfrjqyWiNDyUXOWZp5SNm4leN8EVrzLyVx2UlKBKGarNcl8/2:WsLGyrjiiNWW5SNmHFJW6x7G/2","tlshash":"fcc151941a94fd2b31e139d8e01ba775652ec0333c1af981fa32eced54e4ed187aa531","first_seen":"2026-07-20T21:40:32.205816Z","last_seen":"2026-08-11T14:51:34.551986Z","times_seen":3476,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.7","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.595Z","timestamp":1785984264595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.7 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 29 Mar 2026 07:27:48 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":134630,"size_decoded":46423,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"fd9dfabfa2ce491dde7596d9f2ea3b4f","sha1":"7560230d2a1c73f13f0250e839fbc3d8eead3fde","sha256":"05b11dfc2b0c1507d3f8d191e99d493dd33fc44fb2de82132aa1c7e0a0d0c1cc","sha512":"38b7f41853f0679839557917f92e592830bcc988503ef376668db7ee79d4ae00f15b67967fe0edcd6e354f880f7261c719377576e6bbf918adef8c2a757fc8f3","ssdeep":"1536:B8WOaWbzhwMhU1naVPhEhcHqke/YPEMCEsZBywqIQm6YIzH+ajwb4UX8ulaij86j:IobxTpVNlx7rLmVR32","tlshash":"10d3d7523052a8b646cf50abb417020db7221dadb403b4aeb9fd8cdb9674dc63376376","first_seen":"2023-03-07T22:28:40Z","last_seen":"2026-08-09T15:57:33.512076Z","times_seen":589,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wall/","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-06T02:44:22.247Z","timestamp":1785984262247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wall/ HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlink: \u003chttps://phantomextension.app/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://phantomextension.app/wp-json/wp/v2/pages/9\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://phantomextension.app/?p=9\u003e; rel=shortlink\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 13603\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 06 Aug 2026 02:44:22 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:28.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Elementor:4.2.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":48472,"size_decoded":14047,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (16870), with CRLF, LF line terminators","md5":"1070a4610874c0626e0cd6543dcb946f","sha1":"670509c349ed6e815c900d80c6fa9595960782da","sha256":"c2fccb604f48ef6045a62dd4381fe0a6756e5d1c650404e68d28f1d869e719cd","sha512":"8436857634cc3813745b6513a9f0e0fbe8f4c2b87e39cb2292ae328c9baa77f5abd6d9143bb71ae6cd8d3a0bce67761cd24e34ab515c942bca297eb8fa394d86","ssdeep":"768:pRJQSWYRZdypERVSINRjdC89el9uquZcxG5oNOO+AoPuo0sCs:pfRRyp8N3C8nquZcxG5FO+AoP/","tlshash":"6523d732b59900727b6fc79fc05b731ca598fa55d601aab6b4f5202845e4ef231b370e","first_seen":"2026-08-06T02:44:58.523436Z","last_seen":"2026-08-06T02:44:58.523436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1914,"timings":{"blocked":-1,"dns":290,"connect":136,"send":0,"wait":1344,"receive":0,"ssl":144},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/uploads/elementor/css/post-8.css?ver=1785660130","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:24.387Z","timestamp":1785984264387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-8.css?ver=1785660130 HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 08:42:10 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 405\r\ncontent-type: text/css\r\ndate: Thu, 06 Aug 2026 02:44:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1225,"size_decoded":664,"mime_type":"text/css","magic":"ASCII text, with very long lines (1225), with no line terminators","md5":"46b0d660f8eed73aee006f153adbb414","sha1":"16c3e86b7161098203cf6d5dce98de818b0440e5","sha256":"bf4ce1bb45eddf623a700ea87747c85062748c49a6184cb519ee8fb5b95d88e0","sha512":"106c47eed9034369d4742063d7b2f9c33329874a9fffa70a311ea477bbb715326a387219a345424a796e968d649232429d8b2e82bee6bf371e5460f1155c810c","ssdeep":"","tlshash":"f02136457a23d432e07b092f91c3b02c112cd85fa25f8adff41d9649f9bea4a2228643","first_seen":"2024-12-26T13:52:54.087622Z","last_seen":"2026-08-09T21:30:42.722822Z","times_seen":770,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomextension.app/wp-content/uploads/2026/03/Screenshot-2026-03-09-at-5.04.32-PM.png","fqdn":"phantomextension.app","domain":"phantomextension.app","tld":"app"},"ip":{"addr":"162.241.85.94","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phantomextension.app/wall/","date":"2026-08-06T02:44:25.316Z","timestamp":1785984265316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phantomextension.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 12:44:51 GMT","end":"Tue, 20 Oct 2026 12:44:50 GMT"},"fingerprint":{"sha1":"DA:C2:FE:E0:5B:5A:80:AE:0E:4D:D0:6E:90:BE:69:66:9C:AD:70:5F","sha256":"EA:8D:F7:75:FE:6C:77:43:AB:13:CA:D8:2A:36:DC:B5:69:0A:BD:75:F9:63:14:56:A2:41:18:8C:19:EB:B0:B0"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/Screenshot-2026-03-09-at-5.04.32-PM.png HTTP/1.1\r\nHost: phantomextension.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phantomextension.app/wall/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 29 Mar 2026 07:31:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1033\r\ncontent-type: image/png\r\ndate: Thu, 06 Aug 2026 02:44:25 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1033,"size_decoded":1236,"mime_type":"image/png","magic":"PNG image data, 304 x 216, 4-bit colormap, non-interlaced","md5":"fbb52f87816a4993b60b28f298d9cd75","sha1":"eccfbec71d7811fced0ee94af53f34649574a86b","sha256":"5b842909785bec731b24e7900462034ab9796d2ba380c9970673e9bd909f0d74","sha512":"00a4dec0b271793f5dbbbb2470cea487db322648a96d66c08de9a4cd5a653f916e120b6f0ea505eb192d6fc7ee30a72ee764f78c947079bdcd9e85a092279de8","ssdeep":"","tlshash":"4911a88f2f810617e9faa00e17e0776d924503d819677002db9d977c9599374709553d","first_seen":"2026-03-22T20:01:43.486164Z","last_seen":"2026-08-06T02:44:58.508114Z","times_seen":14,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"phantomextension.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}